Cookie Policy
This page lists everything we store on your device, why, and how to say no. It sits alongside the Privacy Policy, which explains what we then do with the data.
01What these technologies are
A cookie is a small file a site asks your browser to keep and send back on later visits. Local storage does the same job but is never sent to a server — it stays in your browser. We use both, and this policy covers both.
Cookies are first-party when we set them and third-party when an embedded service does. They are session cookies if they die when you close the browser, and persistent if they survive.
02Strictly necessary
These make the service work. They cannot be switched off, and under the ePrivacy rules they do not require consent.
| Name | Purpose | Duration |
|---|---|---|
kdl_session | Keeps you signed in | 30 days |
kdl_csrf | Blocks cross-site request forgery | Session |
kdl_ws | Remembers your active workspace | 1 year |
__Host-kdl_rt | Refresh token for silent re-authentication | 90 days |
03Preferences
These remember a choice you made. They are stored in local storage, never transmitted to us.
| Key | Purpose | Duration |
|---|---|---|
kindle-theme | Whether you chose the light or dark theme with the toggle in the header | Until you clear site data |
This one is real and active on the page you are reading. If you have never touched the theme toggle, nothing is stored and we follow your operating system setting instead.
04Analytics
These tell us which pages and features get used. They are set only if you accept them.
| Provider | Cookie | Purpose | Duration |
|---|---|---|---|
| TBC: analytics provider | TBC: cookie name | Aggregate usage measurement | TBC: duration |
Not yet installed. As shipped, this site sets no analytics cookies at all. Fill this table in — or delete the section — when analytics is actually added, and add a consent banner at the same time.
05Advertising
We set no advertising or cross-site tracking cookies, and we do not share data for behavioural advertising. If that ever changes we will update this page and ask for consent first.
06Third-party content
We load web fonts from Google Fonts. Google receives the request and therefore your IP address and user agent; it does not set cookies for this. If you would rather avoid that entirely, the fonts can be self-hosted — ask us.
07Managing your choices
- In the browser — every major browser lets you block or delete cookies per site, usually under Settings → Privacy. Blocking strictly necessary cookies will sign you out and break the app.
- Global Privacy Control — we honour the GPC signal as an opt-out of any non-essential storage.
- Do Not Track — there is still no agreed standard for DNT, so we do not respond to it. Use GPC or your browser controls instead.
08Changes and contact
We update this page whenever the inventory changes. Questions: TBC: privacy@ email.